skills/skill-creator/SKILL.md
How to create new skills for this HQ — format, frontmatter, content structure. Use when you need to add a new skill to this repository, or when reviewing whether an existing skill is well-formed.
npx skillsauth add sabahattinkalkan/antigravity-fullstack-hq skill-creatorInstall this skill globally with one command. Works with Claude Code, Cursor, and Windsurf.
3 of 9 scanners reported clean
Some scanners were skipped, did not run, or reported a non-clean status. Review each row below.
A skill is a reference document that gives an AI agent (or a developer) deep, actionable knowledge for a specific domain. It is not a README, a tutorial, or a one-liner tip. It contains real patterns, real code, and clear guidance on what NOT to do.
skills/
└── <skill-name>/
└── SKILL.md
Skill names are lowercase, hyphenated: api-design-patterns, auth-patterns, docker-patterns.
---
name: skill-name
description: One-line description. Use when [specific trigger condition].
---
# Title
## [Section 1]
[Content with real code examples]
## [Section 2]
...
## Forbidden Patterns
[What NOT to do — these are as important as the positive guidance]
---
name: skill-name # must match the directory name
description: > # one line: what it does + when to trigger
Generates Excel files with ExcelJS. Use when creating .xlsx exports
from database data in a NestJS app.
---
The description field is what an AI uses to decide whether to load this skill. Make the trigger condition specific:
# Good — specific trigger
description: JWT access/refresh tokens, Passport.js strategies. Use when implementing auth in a NestJS + Next.js app.
# Bad — too vague
description: Authentication patterns. Use when building auth.
Every code block must be runnable with the imports shown. Never use ... to hide required setup.
// Good — complete, runnable snippet
import { Injectable } from '@nestjs/common'
import { InjectRepository } from '@nestjs/typeorm'
import { Repository } from 'typeorm'
import { User } from './user.entity'
@Injectable()
export class UsersRepository {
constructor(
@InjectRepository(User)
private readonly repo: Repository<User>
) {}
findById(id: number) {
return this.repo.findOne({ where: { id } })
}
}
// Bad — too abstract
class MyRepo {
// inject the repo here
findById(id) { ... }
}
The "Forbidden Patterns" section must be the last section. List 5-10 concrete things that cause real bugs, security issues, or maintenance problems.
## Forbidden Patterns
- Never store access tokens in localStorage — XSS can steal them
- Never use the same JWT secret for access and refresh tokens
- Never skip `@IsEmail()` validation on email fields
Don't mix unrelated concerns. If you're writing a testing skill, don't include deployment. If the topic is naturally broad, split it:
# Too broad:
skills/backend/SKILL.md ← covers NestJS + TypeORM + auth + caching
# Better:
skills/backend-dev-guidelines/SKILL.md ← NestJS layering
skills/auth-patterns/SKILL.md ← JWT + Passport
skills/docker-patterns/SKILL.md ← Containerization
npm install exceljs
npm install -D @types/node
Show actual config files, not fragments.
// Bad: explanation of why it's bad
const bad = doWrongThing()
// Good: explanation of why it's better
const good = doRightThing()
Production Deployment Checklist:
□ NODE_ENV=production set
□ Secrets validated at startup
□ Health checks responding
□ Rate limiting enabled
Before merging a new skill:
□ Frontmatter has name + description
□ name matches directory name
□ Description includes "Use when [specific condition]"
□ Code examples are complete (have imports, no ellipsis hiding setup)
□ At least 3 major sections with real content
□ "Forbidden Patterns" section exists and has 5+ entries
□ 200-400 lines total
□ No tutorial prose — reference-style only
□ TypeScript/language specifics match the project stack
# 1. Create the directory and file
mkdir skills/redis-patterns
touch skills/redis-patterns/SKILL.md
# 2. Write the skill following the template above
# 3. Commit
git add skills/redis-patterns/SKILL.md
git commit -m "feat: add redis-patterns skill"
[your code here] — write the actual codetesting
Generating Excel files with xlsx/exceljs in Node.js. Use when generating .xlsx reports, data exports, dashboards, or spreadsheets from database data.
development
Playwright E2E patterns, Testing Library component tests, test selectors. Use when writing browser tests, component tests, or setting up an E2E testing pipeline for a Next.js or React app.
development
Web design best practices, accessibility, responsive layout, color contrast. Use when auditing a UI for a11y compliance, designing responsive layouts, or establishing design standards across a web app.
tools
TypeScript type system patterns, generics, utility types, and strict mode best practices. Use when writing or reviewing TypeScript code.